22 ms·
Don't hash the password on the client. That just changes the password to the hash of the password. Parameterize the SQL on the server instead of concatenating
by sevensevennine 3y ago
Don't hash the password on the client. That just changes the password to the hash of the password.
Parameterize the SQL on the server instead of concatenating strings.
- hn_acker 3y agoIf you're using a third-party reverse proxy, then the third party will have access to the user's password. What's the simplest way to prevent the third-party from knowing the password? Would adding an encryption layer between the user and the actual website owner be both feasible and sufficient for the average website owner?
- Falmarri 3y agoDon't use reverse proxies you don't trust